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EXHIBIT A 

KRIEF DESCRIPTION OF ITEMS TO BE DISCUSSED 

1. The Wagner reference and its use of a constraint language and formal methods to detect 
the existence of buffer flow overflow vulnerabilities. 

2. The present invention's use of compiler techniques to identify not only the existence of 
vulnerabilities, but the locations in the source code where the vulnerabilities occur. 

3. The present invention's use of a vulnerability database to determine the behavior of calls 
to routines, even when the source code for the called routines is not available. 

4. Proposed claim language to clarify the distinctions between Wagner and the invention, 
including the use of compiler techniques to identify the places in the code where vulnerabilities 
occur and the use of a vulnerability database to predict the behavior of calls to routines when 
source code for the called routines is not available. 
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